home

Crux_Calc.exe

Crux Unlocker

.

The executable Crux_Calc.exe has been detected as malware by 10 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from s10581.chomikuj.pl.
Publisher:
.

Product:
Crux Unlocker

Version:
5.00

MD5:
4b2fd06fbc05cce2b4bb8ff04c037c42

SHA-1:
eea609a3af7a45f5a024f8e0cec06ab64f4be22c

SHA-256:
f157e315753d1bffae36437240886de2ac88aeec19215a61b1ead1f3fc9e8b31

Scanner detections:
10 / 68

Status:
Malware

Analysis date:
11/30/2024 11:41:10 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Trojan.VB
7.1.1

AhnLab V3 Security
Win-Trojan/Kqn.454656
2014.02.09

Avira AntiVirus
TR/VB.kqn
7.11.130.56

AVG
Generic13
2015.0.3467

IKARUS anti.virus
Trojan.VB
t3scan.2.2.29

Norman
Troj_Generic.AAXKJ
11.20140522

nProtect
Trojan/W32.Agent.454656.X
14.02.07.03

Qihoo 360 Security
Win32/Trojan.97b
1.0.0.1015

Rising Antivirus
PE:Trojan.Win32.Generic.11EA56BE!300570302
23.00.65.14520

VIPRE Antivirus
Trojan.Win32.Generic
26270

File size:
444 KB (454,656 bytes)

Product version:
5.00

Original file name:
Crux_Calc.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
11/4/2005 5:34:26 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:3fJiE+qKYZQpDYgQRDZvZ6iSeewqhp+cNiBI7df+MKzoAhMmSHSV/N9eRhUYRxWL:3xN9+hUYoZzN5R

Entry address:
0x261C

Entry point:
68, AC, 36, 40, 00, E8, EE, FF, FF, FF, 00, 00, 48, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 59, B5, 78, 82, BB, 06, F0, 4B, 91, 95, 5B, 30, 70, 8D, B9, 59, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 4C, 61, 6E, 67, 5F, 45, 43, 72, 75, 78, 43, 61, 6C, 63, 00, 31, 2E, 43, 61, 70, 74, 69, 00, 6E, 20, 3D, 20, 22, 43, 72, C0, 00, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 0A, 00, 00, 00, 79, 3D, 7F, E0, 5D, B8, 08, 4E, 90, 34, A1, 1E, C0, 49, D7, 07, 01, 00, 00, 00, A0, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
432 KB (442,368 bytes)

The file Crux_Calc.exe has been seen being distributed by the following URL.

http://s10581.chomikuj.pl/File.aspx?e=Vu9dkkwSvnR_w3LkPIHqlHOFKbZ3MiHkL6spYoSmMAb768-1HIXKvOAfwJLeMaKcJwWsAL8EPrBbH8vUXe1fs_QSjXl7mrQwF6jGzEoka9_u5og1wZ01K1xv9WLcxKCL8OZsCacpIUHqq64QsIEk5g&pv=2

Remove Crux_Calc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.